ff7128a5474c428e4a4f88cfdd96f423 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7128a5474c428e4a4f88cfdd96f423
Size

3KB
MD5

ff7128a5474c428e4a4f88cfdd96f423
SHA1

a1d70e6263159a1f7db79f48c0afb28e38b11ff3
SHA256

8d771ff47e56c0d31822fbbf1f9554c7291f1f385050477ad40e7d4d5c1c485d
SHA512

8193d61e7b16a33c8c365a1c9d8abe4c8dd565be9d6ed6fd3e623a1cc5fbd7e7dbf1de23885703b76c0d869b8815612af928262f13e24f644059f9c4e1cb25bd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7128a5474c428e4a4f88cfdd96f423

Files

ff7128a5474c428e4a4f88cfdd96f423
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ